I just read in this forum that the 'Allow Local LAN access'-parameter doesn't have any effect with the PIX so you'll have to forget about that option.You need to use split-tunneling, include all ranges used in the main office which should be accessib...